Privacy policy

Who we are

Resin Mill Europe BV is the data controller for personal data processed through this website.

Registered office: Diebeke(Sch) 1A, 9500 Geraardsbergen, Belgium. VAT BE 1038.772.901. You can reach us about any privacy matter at hello@resinmill.eu.

What information we collect

We collect information in two ways.

• Information you give us. When you submit the distributor application or the contact form, we collect the details you provide, which may include your company name, VAT number, country and region, website and social media, your name and role, email address and phone number, your business profile (business type, customer base, storage and handling capability, lines you already stock) and any message you send.
• Information collected automatically. Our server keeps standard technical logs, including your IP address, for security, abuse prevention and rate limiting. If you reach the site through a campaign link, the campaign parameters (utm_source, utm_medium, utm_campaign) are stored with your enquiry. We do not use advertising or cross-site tracking.

How and why we use your data

We process your personal data for the following purposes and on the following legal bases.

• To assess and respond to distributor applications and enquiries, and to take steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in developing our distribution network (Article 6(1)(f)).
• To send you a confirmation and to contact you about your application or enquiry, on the basis of the consent you give when submitting the form (Article 6(1)(a)) and our legitimate interest (Article 6(1)(f)).
• To keep the site secure and prevent abuse, including rate limiting and logging, on the basis of our legitimate interest (Article 6(1)(f)).
• To comply with legal and accounting obligations (Article 6(1)(c)).

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf under written agreements, and only as needed:

• our customer relationship management system (Odoo), where applications are recorded;
• our email service provider, to send and receive correspondence;
• our hosting and infrastructure providers, who run the website and store the secure lead queue;
• where relevant to your enquiry, the appointed national distributor for your market within the Resin Mill network.

Where your data is processed

We aim to keep personal data within the European Union and European Economic Area. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission Standard Contractual Clauses.

How long we keep it

We keep distributor application data for as long as needed to assess and manage the relationship, and for up to 24 months after our last contact where an application does not proceed, unless a longer period is required by law. Contact messages are kept for up to 24 months. Technical logs are kept for a short period for security purposes.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw any consent you have given, at any time, without affecting prior processing.

Exercising your rights and complaints

To exercise any of these rights, contact us at hello@resinmill.eu. We will respond within the time limits set by the GDPR.

If you believe we have not handled your data properly, you may lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorite de protection des donnees), Drukpersstraat 35, 1000 Brussels, www.gegevensbeschermingsautoriteit.be.

Security

We use appropriate technical and organisational measures to protect personal data, including access controls and encryption in transit. No method of transmission or storage is completely secure, but we work to protect your data and to keep our measures under review.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.